IN THE CLAIMS : 

Please substitute the following claims for the pending 
claims with the same number. 

1. - 37. (Canceled) 

38. (Currently Amended) A method for controlling access to and 
tracking the routing of an electronic document, comprising: 

embedding a control mark within an electronic document 
created by a document word processor, whorcin such that when a body of 
the document may be Is changed by the document word processor after 
the control mark is embedded in the document, the control mark remains 
embedded in the document without having to re-embed the control mark 
in the document, btrt and wherein the control mark cannot be changed or 
removed by means of the document word processor; and 

monitoring detecting transmitted network packetSj-lef 
dotoction of network packets containing the electronic document, based 
on the control mark, in order to block access to the electronic document 
from unauthorized recipients. 

39. (Currently Amended) The method of claim 38 further comprising 
logging an audit record of the transmission, when a network packet 
containing the electronic document is detected by said monitoring 
detecting , wherein the audit record stores information identifying a 
distribution route of the electronic document. 

40. (Original) The method of claim 39 wherein said logging includes 
logging a date and time of the transmission in the audit record. 
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41. (Original) The method of claim 39 wherein said logging includes 
logging a destination of the transmission in the audit record. 

42. (Currently Amended) The method of claim 38 wherein said 
monitoring detecting monitors network packets transmitted internally 
within an organization network. 

43. (Currently Amended) The method of claim 38 wherein said 
monitoring detecting monitors network packets transmitted from within an 
organization network to outside of the organization network. 

44. (Currently Amended) The method of claim 38 wherein said 
monitoring detecting monitors network packets transmitted to an 
organization network from outside of the organization network. 

45. (Original) The method of claim 38 wherein the network packets 
are transmitted in response to an FTP download. 

46. (Original) The method of claim 38 wherein the network packets 
are transmitted In response to an HTTP download. 

47. (Original) The method of claim 38 wherein the network packets 
are transmitted in response to an Instant Messenger download. 

48. (Currently Amended) A system for controlling access to and 
tracking the routing of an electronic document, the system comprising one 
or more tangible computer readable media collectively storing instructions 
encoding: 
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an auto-marking module for embedding a control mark 
within an electronic document created by a document word processor, 
whoroln such that when a body of the document moy be is changed by the 
document word processor after the control mark is embedded in the 
document, the control mark remains embedded in the document without 
having to re-embed the control mark in the document, fetrt and wherein 
the control mark cannot be changed or removed by means of the 
document word processor; and 

a traffic monitor for monitoring detecting transmitted 
network packets , ond for detection of network packets containing the 
electronic document, based on the control mark, in order to block access 
to the electronic document from unauthorized recipients. 

49. (Previously Presented) The system of claim 48 wherein the one or 
more media further store instructions encoding an auditor for logging 
transmission information in an audit record when a network packet 

containing the electronic document is detected by said traffic monitor, 
wherein the audit record stores information identifying a distribution route 
of the electronic document. 

50. (Previously Presented) The system of claim 49 wherein said auditor 
logs a date and time of the network packet's transmission in the audit 
record. 

51. (Previously Presented) The system of claim 49 wherein said auditor 
logs a destination for the network packet in the audit record. 
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52. (Previously Presented) The system of claim 48 wherein said traffic 
monitor monitors network packets transmitted internally within an 
organization network. 

53. (Previously Presented) The system of claim 48 wherein said traffic 
monitor monitors network packets transmitted from within an organization 
network to outside of the organization network. 

54. (Previously Presented) The system of claim 48 wherein said traffic 
monitor monitors network packets transmitted to an organization network 
from outside of the organization network. 

55. (Original) The system of claim 48 wherein the network packets are 
transmitted in response to an FTP download. 

56. (Original) The system of claim 48 wherein the network packets are 
transmitted in response to an HTTP download. 

57. (Original) The system of claim 48 wherein the network packets are 
transmitted in response to an Instant Messenger download. 

58. - 90. (Canceled) 
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